This webinar will give an overview of the conventional login forms and currently more popular logins via social networks. Further, we will discuss adopting Social Logins in your applications and an Identity Hub’s role there to overcome any added overhead. Watch the on-demand webinar here: https://wso2.com/library/webinars/identity-hubs-role-in-social-logins/

1. Identity Hub’s Role in Social Logins
23rd
June 2020

2. Hello!
Kasuni Ranasinghe
Nipun Thathsara
Software Engineer
nipunt@wso2.com
kasunir@wso2.com
Senior Software Engineer

3. 3
In this webinar...
● Conventional logins and its drawbacks.
● Bring Your Own Identity (BYOI) - Social Logins
● Direct integrations and its limitations.
● Identity Hub as a Solution
● Demo

4. Conventional Application Logins

5. Conventional login page
5

6. Conventional registration page
6

7. ● Above registration form :)
● New set of credentials to remember.
● Or risk sharing credentials between applications.
● Follow up email verification after the registration.
Problem with conventional sign-in/sign-up
7
● Less user attraction.
● Risk of users sharing the credentials with other less secure applications.
● Have to address security concerns of the login forms.
as an App owner...
as a user...

8. Bring Your Own Identity (BYOI)
An identity external to your system | A set of credentials maintained by someone else
8

9. Social Logins

10. 10
Social Logins
● Possess a huge user base due to the
nature of their business.
● Along with a considerable set of
demographics on each user.
● They facilitate playing the Identity
Provider role for your applications.

11. Do you need an Identity Hub to integrate social
logins into your application?
11
No

12. 12
Challenges in Social Login Integration
● Managing multiple social logins.
● New social networks.
● Legacy applications (no support for open standard protocols)
● Addressing security vulnerabilities.
● Common regulatory compliance.
● Central governance for application authentication, authorization and user
management.
● Planning for the nth
application.
● SSO between applications.

13. Identity Hub as a Solution

14. 14
OpenId
Connect
Identity Hub
SAML2
web
SSO
SAML 2.0 compliant
Web Application

15. 15
How can an Identity Hub help avoiding those issues?
● De-couple social IDP management from application logic.
● Easily extensible.
● Cross protocol single sign-on.
● Dynamic Application and Identity Provider registrations.
● Up-to-date security vulnerability addressing.
● Delegation of addressing regulatory compliances.
● Central governance for application authentication, authorization and user
management.
● Delegation of CIAM functionality to a dedicated server.

16. 16
Identity Hub
SAML2
Web
SSO
OpenId
Connect
WS-Fed
Custom
SAML2
Web
SSO
OpenId
Connect
OpenId
Connect
Custom
Applications Identity Providers
Custom
Authentication
Service
App 1
App 2
App 3
App 4

17. 17
WSO2 Identity Server as an Identity Hub
● Just In Time provisioning (JIT)
● Single Sign-On (SSO)
● Multi-option login
● Multi-factor login
● Adaptive authentication
● User claim/role transformation

18. Demo Application

19. 19
Application flow
Genesis Web
Application
Identity Providers
Identity Hub

20. Question Time!
20

21. wso2.com
Thanks!